PT-2026-51172

Name of the Vulnerable Software and Affected Versions vLLM versions 0.10.2 through 0.12.x Description Multimodal embeddings processing lacks sparse tensor validation. Since PyTorch disables sparse tensor invariant checks by default, an attacker can submit crafted embedding requests containing...

GHSA-M6QW-4CW2-HM4M vulnerabilities

Vulnerabilities for packages: py3-vllm-cuda-13.0, py3-vllm-cuda-12.9, py3-vllm-cuda-12.4, tritonserver-backend-vllm-cuda-12.9, py3.13-scanner-test-libraries-aiohttp...

CVE-2026-50269 vulnerabilities

Vulnerabilities for packages: py3-vllm-cuda-13.0, py3-vllm-cuda-12.9, py3-vllm-cuda-12.4, tritonserver-backend-vllm-cuda-12.9, py3.13-scanner-test-libraries-aiohttp...

GHSA-6PR9-RP53-2PMC vLLM: OOM Denial of Service via Audio Decompression Bomb

Summary vLLM's /v1/audio/transcriptions endpoint limits compressed upload size but not decoded PCM output. A 25MB OPUS file expands to 14.9GB of float32 PCM at decode time. Tested on vLLM v0.19.0. Details SpeechToTextProcessor rejects uploads over VLLMMAXAUDIOCLIPFILESIZEMB default 25MB based on...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification through the audio.py file. An attacker can cause excessive memory consumption by...

GHSA-HGG8-FQQC-VFMW vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router

vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via the Anthropic API router Researcher: Kai Aizen — SnailSploit @SnailSploit, Adversarial & Offensive Security Research Severity: CVSS 3.1 5.3 Medium AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Target: https://github.com/vllm-project/vllm ---...

Incorrect Conversion between Numeric Types

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Incorrect Conversion between Numeric Types in the ggmldequantize, ggmlmulmatveca8, ggmlmulmata8, and ggmlmoea8 functions when tensor dimensions are...

vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels

Summary All temperature validation gates use comparison operators , which silently evaluate to False for NaN and for positive Infinity in Python's IEEE 754 float semantics. Both values pass every guard and propagate to GPU sampling kernels, where they produce undefined behavior or CUDA errors tha...

Improper Validation of Specified Type of Input

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input due to improper validation of the temperature parameter while sampling. An attacker can cause the...

CVE-2026-12491 Vllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatch between model input and expectations

A flaw was found in vLLM, an open-source library for large language model inference. This vulnerability arises from improper handling of image metadata, specifically EXIF orientation and PNG transparency tRNS data, during image processing. When images are converted to RGB, transparency informatio...

GHSA-VFFW-93WF-4J4Q vulnerabilities

Vulnerabilities for packages: litellm, wazuh-manager-fips, airflow, wazuh-manager, airflow-core, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips...

CVE-2026-53537 vulnerabilities

Vulnerabilities for packages: litellm, wazuh-manager-fips, airflow, wazuh-manager, airflow-core, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips...

GHSA-6JV3-5F52-599M vulnerabilities

Vulnerabilities for packages: litellm, wazuh-manager-fips, airflow, wazuh-manager, airflow-core, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips...

CVE-2026-53539 vulnerabilities

Vulnerabilities for packages: litellm, wazuh-manager-fips, airflow, wazuh-manager, airflow-core, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips...

GHSA-V9PG-7XVM-68HF vulnerabilities

Vulnerabilities for packages: litellm, wazuh-manager-fips, airflow, wazuh-manager, airflow-core, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips...

CVE-2026-53540 vulnerabilities

Vulnerabilities for packages: litellm, wazuh-manager-fips, airflow, wazuh-manager, airflow-core, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips...

PT-2026-50278

Name of the Vulnerable Software and Affected Versions vLLM affected versions not specified Description An issue exists in the image processing logic where image metadata is improperly handled. Specifically, the software fails to call ImageOps.exif transpose to normalize EXIF orientation, causing...

PT-2026-50491

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.23.1rc0 Description An incomplete fix for a previous memory leak issue allows unauthenticated attackers to leak heap memory addresses. The system fails to properly sanitize error messages in several response paths,...

CVE-2026-54283 vulnerabilities

Vulnerabilities for packages: litellm, prefect, airflow, semgrep, tritonserver-backend-vllm-cuda-13.0, airflow-core, prefect-fips, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, mlflow-fips, nemo, mlflow...

GHSA-JP82-JPQV-5VV3 vulnerabilities

Vulnerabilities for packages: litellm, prefect, airflow, semgrep, tritonserver-backend-vllm-cuda-13.0, airflow-core, prefect-fips, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, mlflow-fips, nemo, mlflow...